$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/b7677b23-569f-3269-882c-0cdb2f1c8cad.roa File: b7677b23-569f-3269-882c-0cdb2f1c8cad.roa (raw, json) Hash identifier: vygh0eTjfx0Hqv+J7AGk6ImrU3Fc2eOCpDs1B6Tspzg= Subject key identifier: 34:BC:AB:B4:79:4E:C4:34:81:FD:D9:D6:62:86:44:A0:8B:C7:D1:88 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584B1806C1FD0BF6745040172A40 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/b7677b23-569f-3269-882c-0cdb2f1c8cad.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 31898 IP address blocks: 68.64.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:c1:fd:0b:f6:74:50:40:17:2a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=5421c10a-66e3-45b7-b721-c57f2251cba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:13:75:a6:7b:cc:cc:29:08:f4:75:1d:81:df: f7:56:e9:8b:80:65:52:17:d0:93:25:24:cc:7f:d2: ad:ac:46:86:57:3d:0e:c5:10:7f:4d:e9:f3:5a:19: 9c:69:81:90:c3:09:92:e4:20:98:68:bc:ab:ef:80: 81:cf:17:7c:b2:ae:03:64:97:9f:bf:6e:6f:fd:ec: 6d:63:39:46:97:f6:a0:53:f0:dd:bd:d1:6c:2b:66: fb:f2:14:65:fb:1f:89:9b:8d:65:4d:79:73:18:8f: ab:c9:26:77:a8:d1:9b:63:8c:63:0c:cc:06:b3:47: 06:cc:1b:85:10:84:5f:42:24:54:37:25:19:de:fe: 43:e0:32:49:5c:b6:35:35:68:1e:d7:ca:d3:e6:d0: b1:7b:fa:1b:76:3c:ae:fc:8f:5f:8e:81:80:3e:ae: da:e9:1b:c4:fe:ac:bd:7f:9a:ae:9d:f8:d9:e1:9b: 91:f8:2f:db:4d:c0:4f:72:a7:5c:2d:41:e9:2f:f9: 88:e7:54:1a:98:c2:a6:b0:bd:d7:05:23:7f:3d:ba: 71:fc:f7:02:55:2e:a7:1a:69:a4:47:46:fa:ac:65: 16:92:93:d0:63:a9:d6:1c:4b:c0:7c:a0:76:fe:c4: 07:87:a9:a1:71:32:4d:79:06:d4:89:79:1e:8e:f5: 0d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:BC:AB:B4:79:4E:C4:34:81:FD:D9:D6:62:86:44:A0:8B:C7:D1:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/b7677b23-569f-3269-882c-0cdb2f1c8cad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 68.64.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:35:30:cc:5a:5d:62:ef:9a:5d:15:12:11:fc:3a:91:d3:55: ab:ce:b1:4e:2c:b1:ce:ab:7e:36:ea:1c:8b:8b:63:38:54:b4: 93:9b:fb:21:8a:d5:c1:74:c2:83:27:10:b5:77:57:30:90:b6: f7:0f:4e:11:aa:c1:49:ef:21:03:c4:a3:1e:0e:a1:d4:20:01: 2f:8f:4b:ae:4c:05:a7:d5:99:73:40:d0:94:2e:5a:0c:42:a9: ec:05:f0:4a:53:e8:41:b3:09:3a:d6:84:0b:9a:40:19:b1:e2: a2:94:00:23:d7:58:89:5a:ef:bd:59:22:0d:8b:d6:a5:d2:34: 95:7c:10:1c:c3:d9:e5:22:57:ab:9d:13:4d:c3:11:a9:03:d2: ed:58:84:07:b1:68:19:01:2d:9c:52:e4:7c:ec:09:ea:aa:1f: 68:f6:e0:9b:9c:bd:9d:20:88:18:b0:43:10:9b:d8:7e:a1:be: e0:01:05:92:af:79:62:9b:07:0a:89:0d:fc:bb:b0:2f:6d:99: 55:b4:f8:4f:4b:24:58:ff:3a:5f:64:22:16:04:8f:d5:02:81: 16:51:91:11:6f:fb:89:ee:05:40:44:bb:52:84:c9:bf:bb:c8: 72:1d:e9:60:dc:d8:91:50:c7:76:ec:08:a3:74:7b:dc:79:0f: 94:62:84:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBsH9C/Z0UEAXKkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk NTQyMWMxMGEtNjZlMy00NWI3LWI3MjEtYzU3ZjIyNTFjYmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBN1pnvMzCkI9HUdgd/3VumLgGVSF9CTJSTM f9KtrEaGVz0OxRB/TenzWhmcaYGQwwmS5CCYaLyr74CBzxd8sq4DZJefv25v/ext YzlGl/agU/DdvdFsK2b78hRl+x+Jm41lTXlzGI+rySZ3qNGbY4xjDMwGs0cGzBuF EIRfQiRUNyUZ3v5D4DJJXLY1NWge18rT5tCxe/obdjyu/I9fjoGAPq7a6RvE/qy9 f5qunfjZ4ZuR+C/bTcBPcqdcLUHpL/mI51QamMKmsL3XBSN/Pbpx/PcCVS6nGmmk R0b6rGUWkpPQY6nWHEvAfKB2/sQHh6mhcTJNeQbUiXkejvUNEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDS8q7R5TsQ0gf3Z1mKGRKCLx9GIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYjc2NzdiMjMtNTY5Zi0z MjY5LTg4MmMtMGNkYjJmMWM4Y2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREAVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHk1MMxaXWLvml0VEhH8OpHTVavOsU4ssc6rfjbqHIuLYzhUtJOb+yGK 1cF0woMnELV3VzCQtvcPThGqwUnvIQPEox4OodQgAS+PS65MBafVmXNA0JQuWgxC qewF8EpT6EGzCTrWhAuaQBmx4qKUACPXWIla771ZIg2L1qXSNJV8EBzD2eUiV6ud E03DEakD0u1YhAexaBkBLZxS5HzsCeqqH2j24JucvZ0giBiwQxCb2H6hvuABBZKv eWKbBwqJDfy7sC9tmVW0+E9LJFj/Ol9kIhYEj9UCgRZRkRFv+4nuBUBEu1KEyb+7 yHId6WDc2JFQx3bsCKN0e9x5D5RihKk= -----END CERTIFICATE-----Generated at Thu Sep 18 05:26:45 2025 by rpki-client